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: -html xinlns = 1 P http ://www _w3 . org/ 199 9/xhtml 1 ’> 

-<head> 

<meta c ontent= 1 ' en-us 1 " http - e quiv= 1 ' C ontent-L language’ ’> 

-<meta content= T, text/html; chars et=utf- S 1 1 http -equiv= 11 Content- Type 11 
-<titl e >- ^ 1 Jj!> - ‘^ </title> ^ 

<he ad>- 


<body dir= M rtl T, > 
-<?php 

include ( 1 " header .php 1 ') ; 


^ PHP^i^ (j*\±l\ header 


<span lang= p, ar-eg ll ^<strong>-<span clas s= 1 B style2 1 'i ■ ■ * </span> 

-<br clas s= 1 B style2 1 ">■ 

-/strong^ 

-div>- 

-VvVvV- 

<form name="admm" action= IP siCTiin„php '' method^'post 11 
enctyp e = ' ’mill tip art/ form- data 1 B > 

i . . -. M ^i&.nbsp;&nbsp;-<input name="user H type= ,p text |i >-<br>-<br>-<br > 
^-^&nbsp;&nbsp;&nbsp;<input name = IB p ass 1 ' type— 'pas sword" > <br- 
<br >- 

-<input name= IP submitl IP type= IP submit 11 value= M 

&.nb sp : & nb sp : & nb sp ^&nb sp : -<a hr e f= 1 " r eg .php "> </a> 

</foon> 
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Jajj £i <^*1* f AVuu * ^ j ^v ^Vuh a K session 

. password jjj* username 14 A ^u^Ij 

(2) <A> php JjS. 
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AiiuLA jc-Iuu ^ij Mysql-query fhVu*ti 
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jjj* 4_*is ^jaj root *l&! ^ xampp g-«Ujj • 

A^xl£ J*£ oajj CjULuII Sj&ld £* J*buIL ^j*^ 11 (> _ 5 jxj lift j 

CjULnlj Si&li jjj* 


: yJttl ja us CONNECTION ^ ^ • 


<?plip 

$us emame = 1 'ro ot 1 ' ; 

$p as sword-' " ; 

$ datab as e= T, term 1 " ; 

$ s erver=’'lo c allio st T " ; 

$ c onne ct=mys ql_c onne ct(” $ s erver " = T ' $us emame ", T ‘ $p as sword ") ; 
if (Sconnect) 

i 

$ s ele ct — m y s ql_s ele ct_dJb 0 ' $ datalnas e ' ') or ^ ^ 

> 

else 

echoC'^Wi i^\lu 

} 
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XAMPP SECURITY 

(Requests allowed from iocalhost only) 

This page gives you a quick overview about the security status of your XAMPP installation. (Please continue reading after the table.) 


I Subject 


Status 


These XAMPP pages are accessible by network for everyone 

Every XAMPP demo page you are right now looking at is accessible far everyone over network. Everyone who knows your 3P address can see these pages, 

The MySQL admin user root has NO password iiimwim 

Every local user on Windows bo:* car access your MySQL database with administrator rights, You should set a password. 

PhpMyAdmin is free accessible by network iikawim 

PhpMyAdmin is accessible by network without password. The configuration 'httpd' or 'cookie' in the "config.inc.ptip" can help, 

A FTP server is not running or is blocked by a firewall! 

A FTP server is not running or is blacked by a firewall! J 


The green marked points are secure; the red marked points are definitively unsecure and the yellow marked points oq 1 
because the sofware to check isn't running). 

To fix the problems for mysql, phpmyadmin and the xampp directory simply use 

httD://l&calliQst/securitv/xamppsecuritv.pliD <= [allowed only for localhost] 
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-: ^*311 Jiilb juij- jk us PASSWORD CHANGING 


Security console MySQL & XAMPP directory protection 

MYSQL SECTION: "ROOT" PASSWORD 

MySQL SuperUser: root 

New password: 

Repeat the new password: 

PhpMyAdmin authentication: fittp cookie * 

— Security risk! -— 

Safe plain password in text file? 

(File: C:\xam pp\se cu rit y \secu rity\m ysq I root pa ssw d l.txt) 

Password changing 
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$ password = " How To - Design - php - web - site" • 
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connection . php ^ Vj 
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